News for hackers. Stuff that matters.
Re:Backdoor in event-stream library dependency by yetanotherjosh on Tuesday November 27, 2018 @03:07PM (#18546185)
Then let's hope you're not using Webpack, which alone has several hundred of them and not small ones, mind you... super complex libraries that trying to "own" enough that you'd be able to securely review code diffs is completely infeasible.

There are no comments on this comment yet.